Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa
File:                     3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa (raw, json)
Hash identifier:          9ntHEQ92/lvNgcb4JpNLrL4NJLJVWh5v1sc3emsojHs=
Subject key identifier:   BF:CB:95:CD:C9:BF:53:3A:B4:1E:22:AE:C9:64:BF:BC:F1:32:54:35
Certificate issuer:       /CN=627df6c2-d60a-4467-85f2-dd6d009eafe8
Certificate serial:       010D0C9F43285847213B18BAEFA9C11BA0B4C280
Authority key identifier: 3B:AE:19:3B:C4:79:F6:F2:59:AD:1B:B8:56:E6:5F:E1:1E:DF:64:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     27218
IP address blocks:        192.30.120.0/23 maxlen: 23
                          2620:71:4000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/627df6c2-d60a-4467-85f2-dd6d009eafe8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/627df6c2-d60a-4467-85f2-dd6d009eafe8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:18:ba:ef:a9:c1:1b:a0:b4:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=627df6c2-d60a-4467-85f2-dd6d009eafe8
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=7c2a7c2c-66b9-42b6-9f74-ecabdaa0ffbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9d:82:fa:be:75:5f:9a:dd:72:e2:41:79:0c:
                    ef:91:13:4a:22:20:49:d1:32:c7:a9:9c:02:a3:10:
                    ec:3c:e9:60:78:d8:f7:04:07:c9:1c:ab:5c:46:b6:
                    03:6c:ed:d2:7a:92:6d:30:7a:fa:90:ad:2c:67:3d:
                    fd:d3:a9:29:c5:23:86:38:6b:65:7d:bb:0f:76:9f:
                    4c:03:96:93:f6:b3:cd:2f:a7:8b:c3:b5:c6:1a:40:
                    37:08:8f:62:b2:27:5e:c3:ca:66:52:ce:e5:48:52:
                    60:f6:1f:73:fb:1b:06:c3:aa:43:84:da:ee:5a:9e:
                    5e:88:2e:dc:f2:82:e2:ce:2b:d5:9d:f4:37:2f:87:
                    95:1a:25:4f:05:9c:53:41:11:14:e6:cc:a6:78:b4:
                    ba:68:e5:0e:6b:b1:01:12:41:8a:38:34:51:34:5e:
                    c1:f9:45:cf:a2:23:bd:38:c7:62:87:1d:8e:cc:e7:
                    7b:ab:4f:ef:8e:d8:ce:c9:8f:d3:f5:5e:5d:ce:09:
                    d7:d6:b4:53:41:a0:b9:83:17:5e:11:98:bd:22:79:
                    ad:16:17:7b:b1:38:e9:78:97:68:9b:ae:1d:5a:35:
                    d2:27:1d:66:b3:9a:35:76:80:0f:b6:b7:07:f7:02:
                    ef:ce:e6:6e:0b:2b:d2:d4:32:62:25:78:19:1c:18:
                    00:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:CB:95:CD:C9:BF:53:3A:B4:1E:22:AE:C9:64:BF:BC:F1:32:54:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/627df6c2-d60a-4467-85f2-dd6d009eafe8.crl

            X509v3 Authority Key Identifier:
                keyid:3B:AE:19:3B:C4:79:F6:F2:59:AD:1B:B8:56:E6:5F:E1:1E:DF:64:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.120.0/23
                IPv6:
                  2620:71:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:4d:06:53:a1:40:a3:3c:d3:38:ca:85:ef:fc:26:07:dd:3c:
         e7:e4:89:31:a2:1a:79:88:93:54:8f:65:79:07:b3:ad:c7:e9:
         96:d1:6c:a4:48:55:09:94:a0:dc:7f:76:f6:13:80:11:12:ba:
         26:ec:5a:e3:fd:01:ef:ab:d4:58:34:d4:89:d0:da:a0:b5:f8:
         f0:bb:62:f9:7f:e5:7d:30:fb:be:77:c2:cc:02:34:17:5f:7e:
         0d:90:17:ce:d1:73:7a:86:66:2b:57:75:dd:1e:f8:eb:b7:c4:
         3e:a8:3e:c2:34:8f:e6:65:d8:53:19:19:d2:e0:f1:40:c3:3e:
         cf:db:d9:34:2e:3c:83:8d:a6:92:65:1c:67:84:ba:d4:81:6f:
         78:60:4f:39:40:c6:33:e7:3a:2c:57:17:16:f7:91:e8:66:4f:
         f8:a0:41:b9:c0:72:5e:38:d5:3f:28:7f:f1:4d:d6:82:46:ae:
         87:51:02:6a:b9:23:26:90:37:0b:bc:a2:02:86:a9:76:0e:d7:
         d3:7b:a5:f8:99:df:4f:b7:ff:86:87:44:4e:ac:c1:da:cf:48:
         25:63:12:c8:2c:bc:fe:7b:fb:76:08:e5:5d:cb:c2:b7:61:d3:
         1a:98:f3:a6:75:e5:8f:5c:f6:0e:30:be:e1:dc:b2:22:fa:2b:
         fe:65:a5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:59:51 2024 by rpki-client on console-ams.rpki-client.org